Vulnerability in Intel Server Information Retrieval Utility
CVE-2023-27513
Uncontrolled search path element in some Intel(R) Server Information Retrieval Utility software before version 16.0.9 may allow an authenticated user to potentially enable escalation of privilege via local access.
EPSS: 0.002 (9.1th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.7 (Medium). Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H.
Affected products
- Intel Server_information_retrieval_utility
- N/a Intel(r) Server Information Retrieval Utility Software — versions before version 16.0.9
Weakness classification (CWE)
References
- secure@intel.com (Patch, Vendor Advisory)
Frequently asked questions
- What is CVE-2023-27513?
- CVE-2023-27513 is a medium-severity vulnerability in Intel Server Information Retrieval Utility, classified under Uncontrolled Search Path Element. CVSS score: 6.7/10. Published 2023-11-14.
- How severe is CVE-2023-27513?
- Medium severity. CVSS v3 base score is 6.7 out of 10.